$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/f9b26b9a-62f4-3a86-bbf1-f0545b947871.roa File: f9b26b9a-62f4-3a86-bbf1-f0545b947871.roa (raw, json) Hash identifier: Zfi1zV7Sxczl9yzL5Y+Zzwh2F40yBA3wb7crY6hb+R8= Subject key identifier: E3:A1:E7:DC:C9:94:39:77:D9:B6:0D:37:13:A4:EB:D0:73:1D:14:5D Certificate issuer: /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Certificate serial: 010D0C9F4328584CFB96C0A3A7D393F5D6619280 Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/f9b26b9a-62f4-3a86-bbf1-f0545b947871.roa Signing time: Wed 25 Feb 2026 18:06:17 +0000 ROA not before: Wed 25 Feb 2026 18:06:17 +0000 ROA not after: Tue 26 May 2026 17:06:17 +0000 asID: 1299 IP address blocks: 192.225.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:96:c0:a3:a7:d3:93:f5:d6:61:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65 Validity Not Before: Feb 25 18:06:17 2026 GMT Not After : May 26 17:06:17 2026 GMT Subject: CN=8cf337a0-406a-4eba-91dc-868c01624ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:b2:f3:f0:50:e8:95:0c:6c:11:70:4a:3c: b6:30:86:4e:16:ad:45:22:35:6b:c2:df:cb:5f:08: 8c:7c:3a:a8:f6:59:fb:f0:de:1e:24:76:b4:8c:be: d0:15:6c:4f:80:e6:de:cb:22:b7:c4:f1:4d:3e:8c: 72:ec:e2:d1:6f:14:c8:9c:16:77:2a:ae:30:6e:3a: b1:00:79:71:9b:9b:5e:f0:de:fe:04:54:5e:c3:ef: ba:ce:07:ea:2f:8c:c6:0d:13:93:78:68:a1:c5:80: 91:01:ef:16:5f:dc:16:84:cf:c3:0e:98:fd:c4:05: d9:06:f6:c6:72:7f:12:55:42:08:bc:90:9e:92:52: 54:c5:04:76:8b:9d:54:61:d1:12:ca:6d:6c:2f:81: 70:ef:55:8a:da:5b:15:72:70:a3:00:94:3c:0f:39: fa:8a:66:b5:94:00:4f:92:34:9f:47:b6:09:00:6f: dd:ec:ab:c0:c3:fe:51:06:ed:49:49:80:41:48:e7: 44:5b:31:1a:87:5e:8c:c9:d7:4c:5a:7d:e3:58:34: 07:31:18:f7:c5:47:92:d4:fa:e7:42:f9:8a:17:c1: 38:4c:a0:19:98:28:32:3d:5d:ee:49:52:5c:d8:bc: 23:08:c1:ea:28:e5:5d:d2:e4:3b:c5:ea:94:bc:53: 6b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A1:E7:DC:C9:94:39:77:D9:B6:0D:37:13:A4:EB:D0:73:1D:14:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/f9b26b9a-62f4-3a86-bbf1-f0545b947871.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl X509v3 Authority Key Identifier: keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer sbgp-ipAddrBlock: critical IPv4: 192.225.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:48:b9:d3:53:40:d6:22:7b:33:74:f8:0f:bc:35:9d:45:16: cc:de:36:ba:5b:ab:53:96:50:d1:b6:0c:56:db:3e:3e:25:2e: 46:82:71:af:af:a6:6f:bc:2f:64:fa:84:19:54:21:c6:78:75: 4d:81:b3:f8:ca:57:ed:39:32:60:27:70:ee:e9:31:a9:57:79: 9d:cd:ef:9e:e1:8b:ea:1b:b5:16:de:f6:0b:e5:1b:df:ae:f6: 9f:f8:da:f3:f8:45:98:cd:df:94:b1:69:13:c8:d4:ad:5d:20: 0e:d0:d8:af:b5:e3:7a:8d:2f:65:28:53:4f:95:4a:cc:50:42: 28:8a:84:21:e8:ce:1c:36:c0:ac:6f:00:b9:4d:7e:19:70:f7: 78:ec:07:87:06:a2:17:be:04:72:d0:b4:8e:ad:8d:82:3f:f4: 91:6b:31:8d:8e:d1:12:16:c1:0d:2b:14:c6:f3:e4:bc:a5:16: 07:eb:b4:d0:ed:bc:b6:44:f3:3e:a7:72:57:11:5f:dc:83:2e: eb:8e:90:7c:eb:06:5c:c7:e1:8a:62:d4:1c:e4:7f:e7:a1:bf: d0:7a:b2:1e:73:9b:37:d9:ba:32:f4:36:8e:84:bd:98:62:1f: 24:0c:ea:1d:8b:3e:27:7e:50:dd:15:c6:ee:a7:7f:de:69:9d: 15:ec:63:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz7lsCjp9OT9dZhkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFlMjItMzQ5Yzc1MTk1 ZjY1MB4XDTI2MDIyNTE4MDYxN1oXDTI2MDUyNjE3MDYxN1owLzEtMCsGA1UEAxMk OGNmMzM3YTAtNDA2YS00ZWJhLTkxZGMtODY4YzAxNjI0YWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzWy8/BQ6JUMbBFwSjy2MIZOFq1FIjVrwt/L XwiMfDqo9ln78N4eJHa0jL7QFWxPgObeyyK3xPFNPoxy7OLRbxTInBZ3Kq4wbjqx AHlxm5te8N7+BFRew++6zgfqL4zGDROTeGihxYCRAe8WX9wWhM/DDpj9xAXZBvbG cn8SVUIIvJCeklJUxQR2i51UYdESym1sL4Fw71WK2lsVcnCjAJQ8Dzn6ima1lABP kjSfR7YJAG/d7KvAw/5RBu1JSYBBSOdEWzEah16MyddMWn3jWDQHMRj3xUeS1Prn QvmKF8E4TKAZmCgyPV3uSVJc2LwjCMHqKOVd0uQ7xeqUvFNr4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOh59zJlDl32bYNNxOk69BzHRRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYjlm M2RjNS00ZDgyLTRkODItYWUyMi0zNDljNzUxOTVmNjUvZjliMjZiOWEtNjJmNC0z YTg2LWJiZjEtZjA1NDViOTQ3ODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2I5ZjNkYzUtNGQ4Mi00ZDgyLWFl MjItMzQ5Yzc1MTk1ZjY1L2NiOWYzZGM1LTRkODItNGQ4Mi1hZTIyLTM0OWM3NTE5 NWY2NS5jcmwwHwYDVR0jBBgwFoAUO5u6/Gw878L1iqiluojFFhAupTAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYjlmM2RjNS00ZDgyLTRkODItYWUyMi0zNDlj NzUxOTVmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwOGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtIudNTQNYiezN0+A+8NZ1FFszeNrpbq1OWUNG2DFbbPj4lLkaCca+v pm+8L2T6hBlUIcZ4dU2Bs/jKV+05MmAncO7pMalXeZ3N757hi+obtRbe9gvlG9+u 9p/42vP4RZjN35SxaRPI1K1dIA7Q2K+143qNL2UoU0+VSsxQQiiKhCHozhw2wKxv ALlNfhlw93jsB4cGohe+BHLQtI6tjYI/9JFrMY2O0RIWwQ0rFMbz5LylFgfrtNDt vLZE8z6nclcRX9yDLuuOkHzrBlzH4Ypi1Bzkf+ehv9B6sh5zmzfZujL0No6EvZhi HyQM6h2LPid+UN0Vxu6nf95pnRXsYws= -----END CERTIFICATE-----Generated at Sun Mar 1 14:42:29 2026 by rpki-client